PkgRadar

npm · registry.npmjs.org

@ecency/sdk

Remote Payload: matched "raw.githubusercontent.com"

Why PkgRadar flagged 2.3.15

SeveritySignalEvidence
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/node/index.cjs
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/browser/index.js
mediumRemote Payloadmatched "raw.githubusercontent.com" · package/dist/node/index.mjs

Scanned versions

VersionVerdictScoreScanned (UTC)
2.3.15Review102026-06-11
2.3.14Review102026-06-09
2.3.13Review102026-06-08
2.3.12Review102026-06-08
2.3.11Review102026-06-05
2.3.10Review102026-06-05
2.3.9Review102026-06-04
2.3.7Review102026-06-04
2.3.8Review102026-06-04
2.3.6Review102026-05-29
2.3.4Review102026-05-29
2.3.5Review102026-05-29
2.3.3Review102026-05-27
2.3.2Review102026-05-26
2.3.1Review102026-05-25
2.3.0Review362026-05-25
2.2.22Review362026-05-25

Block this in CI

PkgRadar gates @ecency/sdk (and every other dependency) before it merges. One line in your pipeline:

pkgradar gate --ecosystem npm @ecency/[email protected]
Start free — 25 scans / moView full evidence